UD Mobile on iPhone / IOS - Clarification for confused user

[JTsao]

UD Mobile on my iPhone 12, running the latest ios, can only connect to my IoP if I am on my home LAN, or if I VPN to my home using Wireguard.  I have a paid subscription to ISY Portal.  I have "Use ISY Portal for remote connections" checked in UD Mobile.  I think that there may be some security issue with ios and the certs used by Isy Portal - is there any way around this that doesn't involve me having to buy and install a signed certificate?  Do I need to forward a port through my router?  Does the fact that I paid for a DNS name through CloudFlare help?  I would like to have UD mobile just work, without the additional step of having to VPN to my house.

Edited August 15, 2022 by JTsao

[Javi]

HI @JTsao,

There should be no issues running UD Mobile using ISY Portal, no port forwarding or CERTs required.  What is the error message when pressing "Test System on Remote URL" under the remote Connection Settings?

If the background color of Remote Connection Settings is RED then uncheck "Only Use Local Connection" in Local Connection Settings.  If this setting is enabled the app will never use Remote Connection Settings.

[JTsao]

It says "An SSL error has occurred and a secure connection to the server cannot be made" - "Only use local connection" is definitely not checked.

[Javi]

Thanks.  Did you enter a custom Remote URL or is it an ISY Portal URL (i.e. starts with https://my.isy.io/)?  

If the URL was not populated automatically or does not start with https://my.isy.io then click the delete button next to the Portal Account name, then click the Add button in the Portal Account Window, select your portal account, then select the ISY from the list.

[JTsao]

It's an ISY portal URL - I used to have an ISY994i/Pro but have been running IoP for several months - not sure if this has anything to do with this

[Javi]

It may,  The url endpoint will be different for each ISY.  Assuming IoP UUID has already been added to ISY Portal, follow the same instructions above and select your device from the list.  Then save (sync not required),  do you still get an error when pressing "Test System on Remote URL"?

[JTsao]

OK I deleted and re-added my ISY Portal account as above, but that did not help - still receiving the same error.  To add the IoP back in, I had to VPN into my house (I am at work) and I did get a "Connection Successful" when I was VPN'ed in and tested the link, but when I disconnect the VPN and try to use work WiFi, it still gets the SSL error message.

[JTsao]

After typing the above response, I realized that I was on work WiFi, so I turned it off to use cellular data and it works!  Not sure why the work WiFi does not, so I guess the work WiFi may be the problem - although at my small company, we don't do any special processing on the WiFi - it just allows guests internet connectivity, all of our corporate computers are on a secured wired LAN.

Update: I have learned that we actually use DNS servers which are run by NSA - would that prevent the ISY portal from working?

Edited August 15, 2022 by JTsao

[Javi]

Great!

Maybe IT has something blocked or DNS record is incorrect?   Usually the App's SSL error messages have much more detail so I'm not sure at this point.   

A browser may give a better error message.  Copy the very long Remote URL from the app then append "/WEB/udajax.htm" to get the ISY web interface

 

[JTsao]

Sorry for the trouble - it turned out that IT was doing something which interfered with my access and now it's been removed